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CLAIMS 

What is claimed is: 


1 1 . In a fault tolerant system having a primary device and at least one 

2 redundant device, and further having a remote controller for monitoring the status 

3 of the devices and providing a control signal to switch from the primary device to 

4 the redundant device upon detection of a failure in the primary device, a method 

5 of determining validity of the control signal comprising: 

6 continually sending a first signal having a predetermined varying 

7 characteristic to at least the primary device from the remote controller; and 

q 8 sending a second signal having a different varying characteristic to at least 


J;* 9 the primary device from the remote controller upon detection of a failure of the 

i y 

Cn 10 primary device. 
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y 1 2. The method of claim 1 wherein the varying characteristic comprises 

: 2 a signal frequency. 
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ffj 1 3. The method of claim 2 wherein the signal frequency is a continuous 

f Z 2 wave frequency. 
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1 4. The method of claim 2 wherein the signal frequency is a selected 

2 number of signals per unit of time. 

1 5. The method of claim 1 wherein the at least one device includes a 

2 receiver responsive to the to the first signal for acknowledging receipt thereof to 

3 the remote controller. 
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